Generated by JEB on 2019/08/01

PE: C:\Windows\System32\pdhui.dll Base=0x180000000 SHA-256=83BE9B9CA3E3ECEACFD3F5BB1DB8B2B166D59DA14F1D901DC9187A532F633CC4
PDB: pdhui.pdb GUID={CF9918B1-48DB-9FC2-F051DDC4E15E9FAC} Age=1

299 located named symbols:
0x1800098C0: "int __cdecl DataSrcDlg_BROWSE_LOG_FILES(struct HWND__ * __ptr64,unsigned short,struct HWND__ * __ptr64)" ?DataSrcDlg_BROWSE_LOG_FILES@@YAHPEAUHWND__@@G0@Z
0x18000C300: "__cdecl _imp_DialogBoxParamW" __imp_DialogBoxParamW
0x18000AE70: "__cdecl _raise_securityfailure" __raise_securityfailure
0x180003210: "int __cdecl ListViewGroupCompare(int,int,void * __ptr64)" ?ListViewGroupCompare@@YAHHHPEAX@Z
0x180007174: "int __cdecl PdhiBrowseCtrDlg_OK(struct _PDHI_BROWSE_DIALOG_DATA * __ptr64,unsigned short,struct HWND__ * __ptr64)" ?PdhiBrowseCtrDlg_OK@@YAHPEAU_PDHI_BROWSE_DIALOG_DATA@@GPEAUHWND__@@@Z
0x18000B040: "__cdecl FindPESection" _FindPESection
0x180009604: "long __cdecl StringCchCatW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64)" ?StringCchCatW@@YAJPEAG_KPEBG@Z
0x18000C230: "__cdecl _imp_CompareStringOrdinal" __imp_CompareStringOrdinal
0x180007C80: "void __cdecl PdhiSetupAddedCountersControl(struct HWND__ * __ptr64)" ?PdhiSetupAddedCountersControl@@YAXPEAUHWND__@@@Z
0x1800064EC: "long __cdecl PdhiCompileSelectedCountersW(struct _PDHI_BROWSE_DIALOG_DATA * __ptr64,unsigned short * __ptr64,unsigned long)" ?PdhiCompileSelectedCountersW@@YAJPEAU_PDHI_BROWSE_DIALOG_DATA@@PEAGK@Z
0x18000E0D0: "__cdecl _security_cookie_complement" __security_cookie_complement
0x1800020B8: "int __cdecl PdhiSameInstance(struct _PDH_COUNTER_PATH_ELEMENTS_W * __ptr64,struct _PDH_COUNTER_PATH_ELEMENTS_W * __ptr64)" ?PdhiSameInstance@@YAHPEAU_PDH_COUNTER_PATH_ELEMENTS_W@@0@Z
0x18000C438: "__cdecl _imp_CoInitialize" __imp_CoInitialize
0x180003890: "int __cdecl PdhiLoadInstances(struct HWND__ * __ptr64,unsigned short * __ptr64)" ?PdhiLoadInstances@@YAHPEAUHWND__@@PEAG@Z
0x18000A95C: "__cdecl CRT_INIT" _CRT_INIT
0x18000C140: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x18000461C: "long __cdecl PdhiCompileSelectedObjectsW(struct _PDHI_BROWSE_DIALOG_DATA * __ptr64,unsigned short * __ptr64,unsigned long)" ?PdhiCompileSelectedObjectsW@@YAJPEAU_PDHI_BROWSE_DIALOG_DATA@@PEAGK@Z
0x180002A34: "int __cdecl PdhiLoadNewMachine(struct HWND__ * __ptr64,unsigned short const * __ptr64,int)" ?PdhiLoadNewMachine@@YAHPEAUHWND__@@PEBGH@Z
0x18000C6F8: "*.*" ??_C@_17ECHFBE@?$AA?$CK?$AA?4?$AA?$CK?$AA?$AA@
0x18000C3A8: "__cdecl _imp_GetWindowLongPtrW" __imp_GetWindowLongPtrW
0x18000C368: "__cdecl _imp_SetFocus" __imp_SetFocus
0x1800046FC: "int __cdecl PdhiSelectedInstanceId(struct HWND__ * __ptr64)" ?PdhiSelectedInstanceId@@YAHPEAUHWND__@@@Z
0x18000B2D0: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x180001A60: PdhUiBrowseCountersExW
0x18000C660: "*.blg;*.csv;*.tsv" ??_C@_1CE@MNLLCOMK@?$AA?$CK?$AA?4?$AAb?$AAl?$AAg?$AA?$DL?$AA?$CK?$AA?4?$AAc?$AAs?$AAv?$AA?$DL?$AA?$CK?$AA?4?$AAt?$AAs?$AAv?$AA?$AA@
0x18000C338: "__cdecl _imp_GetWindowTextLengthA" __imp_GetWindowTextLengthA
0x18000C258: "__cdecl _imp_GlobalUnlock" __imp_GlobalUnlock
0x18000C288: "__cdecl _imp_GetDlgCtrlID" __imp_GetDlgCtrlID
0x18000C128: "__cdecl _imp_GetTextExtentPoint32W" __imp_GetTextExtentPoint32W
0x18000E6B0: ThisDLLHandle
0x18000C1E8: "__cdecl _imp_DeactivateActCtx" __imp_DeactivateActCtx
0x18000C1C0: "__cdecl _imp_GetModuleFileNameA" __imp_GetModuleFileNameA
0x1800015A4: "long __cdecl PdhUiEnableFusion(struct _PDHUI_FUSION_CONTEXT * __ptr64)" ?PdhUiEnableFusion@@YAJPEAU_PDHUI_FUSION_CONTEXT@@@Z
0x18000812C: "__int64 __cdecl PdhiBrowseCtrDlg_WM_INITDIALOG(struct HWND__ * __ptr64,unsigned __int64,__int64)" ?PdhiBrowseCtrDlg_WM_INITDIALOG@@YA_JPEAUHWND__@@_K_J@Z
0x180001F98: "void __cdecl PdhiRemoveCounter(struct _PDHI_BROWSE_DIALOG_DATA * __ptr64,struct _HASH_ENTRY * __ptr64)" ?PdhiRemoveCounter@@YAXPEAU_PDHI_BROWSE_DIALOG_DATA@@PEAU_HASH_ENTRY@@@Z
0x18000C378: "__cdecl _imp_IsWindowEnabled" __imp_IsWindowEnabled
0x18000C3D8: "__cdecl _imp_wcschr" __imp_wcschr
0x18000C458: ole32_NULL_THUNK_DATA
0x18000C4E0: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x18000A4FC: PdhiMultiByteToWideChar
0x18000C1F0: "__cdecl _imp_FormatMessageW" __imp_FormatMessageW
0x180009EC0: PdhUiSelectDataSourceW
0x180001E40: "long __cdecl PdhiParseCounter(unsigned short * __ptr64,struct _PDH_COUNTER_PATH_ELEMENTS_W * __ptr64 * __ptr64)" ?PdhiParseCounter@@YAJPEAGPEAPEAU_PDH_COUNTER_PATH_ELEMENTS_W@@@Z
0x180001460: PdhUiBrowseCountersA
0x180009058: "__int64 __cdecl PdhiBrowseCtrDlg_WM_COMMAND(struct HWND__ * __ptr64,unsigned __int64,__int64)" ?PdhiBrowseCtrDlg_WM_COMMAND@@YA_JPEAUHWND__@@_K_J@Z
0x18000B027: "__cdecl XcptFilter" _XcptFilter
0x18000C4E8: "__cdecl _xc_a" __xc_a
0x18000C2B8: "__cdecl _imp_GetFocus" __imp_GetFocus
0x18000C2D8: "__cdecl _imp_SetWindowLongPtrW" __imp_SetWindowLongPtrW
0x18000C5B0: "\\%s\%s(*)\%s" ??_C@_1BM@NECDOND@?$AA?2?$AA?2?$AA?$CF?$AAs?$AA?2?$AA?$CF?$AAs?$AA?$CI?$AA?$CK?$AA?$CJ?$AA?2?$AA?$CF?$AAs?$AA?$AA@
0x18000C118: "__cdecl _imp_GetOpenFileNameW" __imp_GetOpenFileNameW
0x18000C4B0: "__cdecl _imp_PdhMakeCounterPathW" __imp_PdhMakeCounterPathW
0x180001D38: StringCchCopyW
0x18000C4A0: "__cdecl _imp_PdhEnumObjectItemsHW" __imp_PdhEnumObjectItemsHW
0x18000C2A8: "__cdecl _imp_GetWindow" __imp_GetWindow
0x18000E108: "unsigned long * PdhiDatasrcaulControlIdToHelpIdMap" ?PdhiDatasrcaulControlIdToHelpIdMap@@3PAKA
0x18000C310: "__cdecl _imp_MessageBoxW" __imp_MessageBoxW
0x18000C428: "__cdecl _imp_memset" __imp_memset
0x180002600: "int __cdecl PdhiSelectItemsInPath(struct HWND__ * __ptr64)" ?PdhiSelectItemsInPath@@YAHPEAUHWND__@@@Z
0x18000B1FF: "__cdecl initterm" _initterm
0x18000C3E0: "__cdecl _imp__getmbcp" __imp__getmbcp
0x18000E8F0: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x18000C4D0: pdh_NULL_THUNK_DATA
0x18000C380: "__cdecl _imp_SendDlgItemMessageW" __imp_SendDlgItemMessageW
0x18000C190: "__cdecl _imp_Sleep" __imp_Sleep
0x18000C2F8: "__cdecl _imp_GetSystemMetrics" __imp_GetSystemMetrics
0x18000C508: "__cdecl _xi_z" __xi_z
0x18000C170: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x18000AE64: "__cdecl _C_specific_handler" __C_specific_handler
0x18000C468: "__cdecl _imp_PdhConnectMachineW" __imp_PdhConnectMachineW
0x180006564: "long __cdecl PdhiCompileSelectedCountersA(struct _PDHI_BROWSE_DIALOG_DATA * __ptr64,char * __ptr64,unsigned long)" ?PdhiCompileSelectedCountersA@@YAJPEAU_PDHI_BROWSE_DIALOG_DATA@@PEADK@Z
0x18000C398: "__cdecl _imp_BeginDeferWindowPos" __imp_BeginDeferWindowPos
0x18000C758: "*" ??_C@_13BBDEGPLJ@?$AA?$CK?$AA?$AA@
0x18000C1D0: "__cdecl _imp_HeapFree" __imp_HeapFree
0x180009984: "int __cdecl DataSrcDlg_OK(struct HWND__ * __ptr64,unsigned short,struct HWND__ * __ptr64)" ?DataSrcDlg_OK@@YAHPEAUHWND__@@G0@Z
0x18000C4B8: "__cdecl _imp_PdhGetDefaultPerfObjectHW" __imp_PdhGetDefaultPerfObjectHW
0x18000C570: "pdh.dll" ??_C@_1BA@HMPOAHMP@?$AAp?$AAd?$AAh?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x1800047A4: "long __cdecl PdhiCompileSelectedCountersT(struct _PDHI_BROWSE_DIALOG_DATA * __ptr64,unsigned char * __ptr64,unsigned long,int,int)" ?PdhiCompileSelectedCountersT@@YAJPEAU_PDHI_BROWSE_DIALOG_DATA@@PEAEKHH@Z
0x180004298: "long __cdecl PdhiCompileSelectedObjectsT(struct _PDHI_BROWSE_DIALOG_DATA * __ptr64,unsigned char * __ptr64,unsigned long,int,int)" ?PdhiCompileSelectedObjectsT@@YAJPEAU_PDHI_BROWSE_DIALOG_DATA@@PEAEKHH@Z
0x18000B24C: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x18000A060: PdhUiSelectDataSourceA
0x180001310: PdhUiBrowseCountersW
0x18000C744: "WBEM:" ??_C@_05IMKEAFNP@WBEM?3?$AA@
0x18000B033: "__cdecl amsg_exit" _amsg_exit
0x180002F4C: "int __cdecl PdhiLoadCounters(struct HWND__ * __ptr64,unsigned short * __ptr64,unsigned short * __ptr64,int)" ?PdhiLoadCounters@@YAHPEAUHWND__@@PEAG1H@Z
0x18000D3E0: "__cdecl _IMPORT_DESCRIPTOR_pdh" __IMPORT_DESCRIPTOR_pdh
0x18000C130: GDI32_NULL_THUNK_DATA
0x18000C198: "__cdecl _imp_WideCharToMultiByte" __imp_WideCharToMultiByte
0x180001678: "long __cdecl PdhUiFormatMessage(long,unsigned short const * __ptr64,unsigned short * __ptr64,unsigned __int64,int,...)" ?PdhUiFormatMessage@@YAJJPEBGPEAG_KHZZ
0x18000174C: "long __cdecl PdhUiShowErrorMessage(struct HWND__ * __ptr64,long)" ?PdhUiShowErrorMessage@@YAJPEAUHWND__@@J@Z
0x18000C3C8: "__cdecl _imp_towlower" __imp_towlower
0x1800096A8: "unsigned long __cdecl MakeLogFilterInfoString(unsigned short * __ptr64,unsigned long)" ?MakeLogFilterInfoString@@YAKPEAGK@Z
0x18000C440: "__cdecl _imp_CoUninitialize" __imp_CoUninitialize
0x18000C5D0: "\%s(*)\%s" ??_C@_1BE@CKCBIMIF@?$AA?2?$AA?$CF?$AAs?$AA?$CI?$AA?$CK?$AA?$CJ?$AA?2?$AA?$CF?$AAs?$AA?$AA@
0x180002C30: "int __cdecl PdhiLoadKnownMachines(struct HWND__ * __ptr64)" ?PdhiLoadKnownMachines@@YAHPEAUHWND__@@@Z
0x18000D390: "__cdecl _IMPORT_DESCRIPTOR_COMDLG32" __IMPORT_DESCRIPTOR_COMDLG32
0x18000C328: "__cdecl _imp_ReleaseDC" __imp_ReleaseDC
0x18000C1A0: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x18000C640: IID_IDsObjectPicker
0x18000E8E0: "__cdecl _native_startup_lock" __native_startup_lock
0x180001008: DllMain
0x18000C2F0: "__cdecl _imp_EndDialog" __imp_EndDialog
0x18000C420: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x180008D70: "__int64 __cdecl PdhiBrowseCtrDlg_START_SEARCH(struct _PDHI_BROWSE_DIALOG_DATA * __ptr64,unsigned short,struct HWND__ * __ptr64)" ?PdhiBrowseCtrDlg_START_SEARCH@@YA_JPEAU_PDHI_BROWSE_DIALOG_DATA@@GPEAUHWND__@@@Z
0x18000C188: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x1800028D0: "unsigned long __cdecl PdhiLoadDetailLevelCombo(struct HWND__ * __ptr64,unsigned long)" ?PdhiLoadDetailLevelCombo@@YAKPEAUHWND__@@K@Z
0x18000C290: "__cdecl _imp_IsDlgButtonChecked" __imp_IsDlgButtonChecked
0x18000C278: KERNEL32_NULL_THUNK_DATA
0x18000C270: "__cdecl _imp_GetWindowsDirectoryW" __imp_GetWindowsDirectoryW
0x18000C1F8: "__cdecl _imp_GetLastError" __imp_GetLastError
0x1800070A4: "int __cdecl PdhiAddFromAvailableCounters(struct _PDHI_BROWSE_DIALOG_DATA * __ptr64,unsigned short,struct HWND__ * __ptr64)" ?PdhiAddFromAvailableCounters@@YAHPEAU_PDHI_BROWSE_DIALOG_DATA@@GPEAUHWND__@@@Z
0x18000E0C0: "__cdecl _native_dllmain_reason" __native_dllmain_reason
0x18000B228: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x18000C450: "__cdecl _imp_ReleaseStgMedium" __imp_ReleaseStgMedium
0x18000C610: "Column" ??_C@_1O@JKCEANF@?$AAC?$AAo?$AAl?$AAu?$AAm?$AAn?$AA?$AA@
0x18000C1E0: "__cdecl _imp_CreateActCtxA" __imp_CreateActCtxA
0x18000E6C0: szStaticLocalMachineName
0x18000C148: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x18000C1C8: "__cdecl _imp_ActivateActCtx" __imp_ActivateActCtx
0x18000C1D8: "__cdecl _imp_WaitForSingleObject" __imp_WaitForSingleObject
0x18000C2A0: "__cdecl _imp_DeferWindowPos" __imp_DeferWindowPos
0x18000B0F0: "__cdecl ValidateImageBase" _ValidateImageBase
0x18000E8C8: "unsigned short * __ptr64 __ptr64 g_szLocalMachine" ?g_szLocalMachine@@3PEAGEA
0x180004694: "long __cdecl PdhiCompileSelectedObjectsA(struct _PDHI_BROWSE_DIALOG_DATA * __ptr64,char * __ptr64,unsigned long)" ?PdhiCompileSelectedObjectsA@@YAJPEAU_PDHI_BROWSE_DIALOG_DATA@@PEADK@Z
0x180001D38: "long __cdecl StringCchCopyW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64)" ?StringCchCopyW@@YAJPEAG_KPEBG@Z
0x180002E5C: "__int64 __cdecl PdhiBrowseCtrDlg_WM_LOAD_COUNTERS(struct HWND__ * __ptr64,unsigned __int64,__int64)" ?PdhiBrowseCtrDlg_WM_LOAD_COUNTERS@@YA_JPEAUHWND__@@_K_J@Z
0x18000C340: "__cdecl _imp_GetDlgItem" __imp_GetDlgItem
0x18000C650: CLSID_DsObjectPicker
0x18000C210: "__cdecl _imp_HeapAlloc" __imp_HeapAlloc
0x18000D3CC: "__cdecl _IMPORT_DESCRIPTOR_ole32" __IMPORT_DESCRIPTOR_ole32
0x18000C218: "__cdecl _imp_FreeLibrary" __imp_FreeLibrary
0x180001BD0: PdhUiBrowseCountersExA
0x180009AEC: "int __cdecl DataSrcDlg_WM_INITDIALOG(struct HWND__ * __ptr64,unsigned __int64,__int64)" ?DataSrcDlg_WM_INITDIALOG@@YAHPEAUHWND__@@_K_J@Z
0x18000ABA0: "__cdecl DllMainCRTStartup" _DllMainCRTStartup
0x18000C418: "__cdecl _imp__initterm" __imp__initterm
0x18000C4C0: "__cdecl _imp_PdhGetExplainText" __imp_PdhGetExplainText
0x18000C228: "__cdecl _imp_SetLastError" __imp_SetLastError
0x18000C498: "__cdecl _imp_PdhEnumObjectsHW" __imp_PdhEnumObjectsHW
0x1800075E0: "void __cdecl PdhiLayoutDialog(struct _PDHI_BROWSE_DIALOG_DATA * __ptr64)" ?PdhiLayoutDialog@@YAXPEAU_PDHI_BROWSE_DIALOG_DATA@@@Z
0x18000C2C0: "__cdecl _imp_LoadCursorA" __imp_LoadCursorA
0x18000C600: "Column1" ??_C@_1BA@MCAEOGKM@?$AAC?$AAo?$AAl?$AAu?$AAm?$AAn?$AA1?$AA?$AA@
0x18000E000: "struct _FILE_FILTER_INFO * ffiLogFilterInfo" ?ffiLogFilterInfo@@3PAU_FILE_FILTER_INFO@@A
0x180001DC0: StringCchPrintfW
0x18000E8D0: "__cdecl _onexitend" __onexitend
0x18000C248: "__cdecl _imp_CreateThread" __imp_CreateThread
0x18000C4D8: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x18000C158: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x18000C3B8: USER32_NULL_THUNK_DATA
0x18000A454: GetStringResource
0x18000C298: "__cdecl _imp_WinHelpW" __imp_WinHelpW
0x18000C220: "__cdecl _imp_ReleaseActCtx" __imp_ReleaseActCtx
0x18000C358: "__cdecl _imp_EndDeferWindowPos" __imp_EndDeferWindowPos
0x18000C4F8: "__cdecl _xi_a" __xi_a
0x18000C160: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x18000C460: "__cdecl _imp_PdhCloseLog" __imp_PdhCloseLog
0x18000C760: "blg" ??_C@_17NBNEIHML@?$AAb?$AAl?$AAg?$AA?$AA@
0x18000C580: "" ??_C@_11LOCGONAA@?$AA?$AA@
0x18000E8F8: "__cdecl pRawDllMain" _pRawDllMain
0x18000C2B0: "__cdecl _imp_GetWindowRect" __imp_GetWindowRect
0x180002E30: "int __cdecl SubItemCompareFunc(__int64,__int64,__int64)" ?SubItemCompareFunc@@YAH_J00@Z
0x18000A80C: PatternMatch
0x18000AE40: "__cdecl _security_check_cookie" __security_check_cookie
0x18000C4F0: "__cdecl _xc_z" __xc_z
0x18000C318: "__cdecl _imp_GetWindowTextW" __imp_GetWindowTextW
0x18000E6B8: hPdhHeap
0x18000C448: "__cdecl _imp_CoCreateInstance" __imp_CoCreateInstance
0x18000C728: "WBEM:" ??_C@_1M@BLKLJAHA@?$AAW?$AAB?$AAE?$AAM?$AA?3?$AA?$AA@
0x18000C138: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x18000C240: "__cdecl _imp_HeapReAlloc" __imp_HeapReAlloc
0x180007DE0: "unsigned long __cdecl PdhiBrowseCtrDlg_InitThread(void * __ptr64)" ?PdhiBrowseCtrDlg_InitThread@@YAKPEAX@Z
0x18000C390: "__cdecl _imp_MapWindowPoints" __imp_MapWindowPoints
0x18000C1B8: "__cdecl _imp_GetProcessHeap" __imp_GetProcessHeap
0x18000C2C8: "__cdecl _imp_GetDC" __imp_GetDC
0x18000C2D0: "__cdecl _imp_SetWindowPos" __imp_SetWindowPos
0x18000C6B8: "*.log" ??_C@_1M@PPKPPOKL@?$AA?$CK?$AA?4?$AAl?$AAo?$AAg?$AA?$AA@
0x18000C5E8: "---" ??_C@_17BBMEDGBK@?$AA?9?$AA?9?$AA?9?$AA?$AA@
0x180007BAC: "void __cdecl PdhiSetupAvailableCountersControl(struct HWND__ * __ptr64)" ?PdhiSetupAvailableCountersControl@@YAXPEAUHWND__@@@Z
0x18000C6C8: "*.blg;*.csv;*.tsv;*.log" ??_C@_1DA@MOIMLIBD@?$AA?$CK?$AA?4?$AAb?$AAl?$AAg?$AA?$DL?$AA?$CK?$AA?4?$AAc?$AAs?$AAv?$AA?$DL?$AA?$CK?$AA?4?$AAt?$AAs?$AAv?$AA?$DL?$AA?$CK?$AA?4?$AAl?$AAo?$AAg?$AA?$AA@
0x18000C588: "Can't load counters" ??_C@_1CI@LMCAJLLJ@?$AAC?$AAa?$AAn?$AA?8?$AAt?$AA?5?$AAl?$AAo?$AAa?$AAd?$AA?5?$AAc?$AAo?$AAu?$AAn?$AAt?$AAe?$AAr?$AAs?$AA?$AA@
0x18000C268: "__cdecl _imp_MultiByteToWideChar" __imp_MultiByteToWideChar
0x18000C510: "__cdecl _guard_fids_table" __guard_fids_table
0x18000C370: "__cdecl _imp_MoveWindow" __imp_MoveWindow
0x18000C2E8: "__cdecl _imp_SendMessageA" __imp_SendMessageA
0x18000C430: msvcrt_NULL_THUNK_DATA
0x18000C010: "__cdecl load_config_used" _load_config_used
0x18000C754: "#" ??_C@_13GMDMCADD@?$AA?$CD?$AA?$AA@
0x18000C4A8: "__cdecl _imp_PdhParseCounterPathA" __imp_PdhParseCounterPathA
0x18000A7C4: DataSourceTypeW
0x18000A6DC: DataSourceTypeA
0x18000C3E8: "__cdecl _imp_wcsnlen" __imp_wcsnlen
0x18000D3A4: "__cdecl _IMPORT_DESCRIPTOR_USER32" __IMPORT_DESCRIPTOR_USER32
0x1800011C0: PdhUiBrowseCountersHA
0x18000C308: "__cdecl _imp_SetWindowTextW" __imp_SetWindowTextW
0x180001070: PdhUiBrowseCountersHW
0x1800072E0: "void __cdecl PdhiUpdateExplainText(struct HWND__ * __ptr64)" ?PdhiUpdateExplainText@@YAXPEAUHWND__@@@Z
0x18000C400: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x180002468: "__int64 __cdecl PdhiGetListText(struct HWND__ * __ptr64,int,int,unsigned short * __ptr64 * __ptr64,unsigned long * __ptr64)" ?PdhiGetListText@@YA_JPEAUHWND__@@HHPEAPEAGPEAK@Z
0x18000C1A8: "__cdecl _imp_DisableThreadLibraryCalls" __imp_DisableThreadLibraryCalls
0x18000C360: "__cdecl _imp_LoadStringW" __imp_LoadStringW
0x18000C180: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x18000C150: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x18000A200: PdhiBrowseDataSource
0x18000C320: "__cdecl _imp_EnableWindow" __imp_EnableWindow
0x18000256C: "__int64 __cdecl PdhiGetCounterText(struct HWND__ * __ptr64,int,unsigned short * __ptr64,unsigned long)" ?PdhiGetCounterText@@YA_JPEAUHWND__@@HPEAGK@Z
0x18000C178: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x180009D10: "__int64 __cdecl DataSrcDlgProc(struct HWND__ * __ptr64,unsigned int,unsigned __int64,__int64)" ?DataSrcDlgProc@@YA_JPEAUHWND__@@I_K_J@Z
0x18000C120: COMDLG32_NULL_THUNK_DATA
0x18000C348: "__cdecl _imp_GetClientRect" __imp_GetClientRect
0x18000B210: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x18000C350: "__cdecl _imp_SetCursor" __imp_SetCursor
0x18000C488: "__cdecl _imp_PdhEnumMachinesHW" __imp_PdhEnumMachinesHW
0x18000C3A0: "__cdecl _imp_ShowWindow" __imp_ShowWindow
0x1800093C0: "__int64 __cdecl BrowseCounterDlgProc(struct HWND__ * __ptr64,unsigned int,unsigned __int64,__int64)" ?BrowseCounterDlgProc@@YA_JPEAUHWND__@@I_K_J@Z
0x18000C688: "*.blg" ??_C@_1M@GMLBJODH@?$AA?$CK?$AA?4?$AAb?$AAl?$AAg?$AA?$AA@
0x18000C490: "__cdecl _imp_PdhExpandCounterPathW" __imp_PdhExpandCounterPathW
0x18000C3F8: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x18000C698: "*.csv" ??_C@_1M@LKDOBOBN@?$AA?$CK?$AA?4?$AAc?$AAs?$AAv?$AA?$AA@
0x18000C3F0: "__cdecl _imp_strnlen" __imp_strnlen
0x18000C2E0: "__cdecl _imp_SendMessageW" __imp_SendMessageW
0x18000C480: "__cdecl _imp_PdhOpenLogA" __imp_PdhOpenLogA
0x18000C620: "CFSTR_DSOP_DS_SELECTION_LIST" ??_C@_0BN@MGCNDDFH@CFSTR_DSOP_DS_SELECTION_LIST?$AA@
0x18000C478: "__cdecl _imp_PdhOpenLogW" __imp_PdhOpenLogW
0x18000C470: "__cdecl _imp_PdhParseCounterPathW" __imp_PdhParseCounterPathW
0x18000C1B0: "__cdecl _imp_GetComputerNameW" __imp_GetComputerNameW
0x18000663C: "long __cdecl PdhiCompileCachedCountersA(struct _PDHI_BROWSE_DIALOG_DATA * __ptr64,char * __ptr64,unsigned long)" ?PdhiCompileCachedCountersA@@YAJPEAU_PDHI_BROWSE_DIALOG_DATA@@PEADK@Z
0x18000C4C8: "__cdecl _imp_PdhParseInstanceNameW" __imp_PdhParseInstanceNameW
0x18000C5F0: "%s#%d" ??_C@_1M@INBKDKIH@?$AA?$CF?$AAs?$AA?$CD?$AA?$CF?$AAd?$AA?$AA@
0x18000E0C8: "__cdecl _security_cookie" __security_cookie
0x18000C388: "__cdecl _imp_SetWindowTextA" __imp_SetWindowTextA
0x1800065CC: "long __cdecl PdhiCompileCachedCountersW(struct _PDHI_BROWSE_DIALOG_DATA * __ptr64,unsigned short * __ptr64,unsigned long)" ?PdhiCompileCachedCountersW@@YAJPEAU_PDHI_BROWSE_DIALOG_DATA@@PEAGK@Z
0x18000C200: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x18000C780: "__cdecl _xmm@3fd33333333333333fc3333333333333" __xmm@3fd33333333333333fc3333333333333
0x18000C6A8: "*.tsv" ??_C@_1M@MMEACGCP@?$AA?$CK?$AA?4?$AAt?$AAs?$AAv?$AA?$AA@
0x18000C208: "__cdecl _imp_LoadLibraryW" __imp_LoadLibraryW
0x180006F30: "int __cdecl PdhiBrowseCtrDlg_REMOVE(struct _PDHI_BROWSE_DIALOG_DATA * __ptr64,unsigned short,struct HWND__ * __ptr64)" ?PdhiBrowseCtrDlg_REMOVE@@YAHPEAU_PDHI_BROWSE_DIALOG_DATA@@GPEAUHWND__@@@Z
0x18000608C: "long __cdecl PdhiCompileCachedCountersT(struct _PDHI_BROWSE_DIALOG_DATA * __ptr64,unsigned char * __ptr64,unsigned long,int)" ?PdhiCompileCachedCountersT@@YAJPEAU_PDHI_BROWSE_DIALOG_DATA@@PEAEKH@Z
0x180002188: "unsigned long __cdecl PdhiInsertCounterToHashTable(struct _PDHI_BROWSE_DIALOG_DATA * __ptr64,unsigned short * __ptr64,struct _HASH_ENTRY * __ptr64 * __ptr64)" ?PdhiInsertCounterToHashTable@@YAKPEAU_PDHI_BROWSE_DIALOG_DATA@@PEAGPEAPEAU_HASH_ENTRY@@@Z
0x18000C3D0: "__cdecl _imp__ltow_s" __imp__ltow_s
0x18000E8D8: "__cdecl _onexitbegin" __onexitbegin
0x180008F64: "__int64 __cdecl PdhiBrowseCtrDlg_WM_NOTIFY(struct HWND__ * __ptr64,unsigned __int64,__int64)" ?PdhiBrowseCtrDlg_WM_NOTIFY@@YA_JPEAUHWND__@@_K_J@Z
0x18000C3C0: "__cdecl _imp__vsnwprintf" __imp__vsnwprintf
0x18000C168: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x18000D37C: "__cdecl _IMPORT_DESCRIPTOR_KERNEL32" __IMPORT_DESCRIPTOR_KERNEL32
0x18000B124: "__cdecl _security_init_cookie" __security_init_cookie
0x18000C770: "__cdecl _xmm@3fc33333333333333fd999999999999a" __xmm@3fc33333333333333fd999999999999a
0x18000D368: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x180001880: PdhUiBrowseCountersExHW
0x180002064: "void __cdecl PdhiRemoveCounterFromHashTable(struct _HASH_ENTRY * __ptr64)" ?PdhiRemoveCounterFromHashTable@@YAXPEAU_HASH_ENTRY@@@Z
0x18000C74C: "WMI:" ??_C@_04IAHCPDOP@WMI?3?$AA@
0x18000C330: "__cdecl _imp_RegisterClipboardFormatA" __imp_RegisterClipboardFormatA
0x180001980: PdhUiBrowseCountersExHA
0x18000C410: "__cdecl _imp_malloc" __imp_malloc
0x180006A58: "int __cdecl PdhiBrowseCtrDlg_OBJECT_LIST(struct _PDHI_BROWSE_DIALOG_DATA * __ptr64,unsigned __int64,__int64)" ?PdhiBrowseCtrDlg_OBJECT_LIST@@YAHPEAU_PDHI_BROWSE_DIALOG_DATA@@_K_J@Z
0x18000C250: "__cdecl _imp_GlobalLock" __imp_GlobalLock
0x18000D3B8: "__cdecl _IMPORT_DESCRIPTOR_GDI32" __IMPORT_DESCRIPTOR_GDI32
0x18000AEB0: "__cdecl _report_gsfailure" __report_gsfailure
0x18000A58C: PdhiConvertUnicodeToAnsi
0x1800066A0: "int __cdecl PdhiBrowseCtrDlg_MACHINE_COMBO(struct _PDHI_BROWSE_DIALOG_DATA * __ptr64,unsigned short,struct HWND__ * __ptr64)" ?PdhiBrowseCtrDlg_MACHINE_COMBO@@YAHPEAU_PDHI_BROWSE_DIALOG_DATA@@GPEAUHWND__@@@Z
0x18000C238: "__cdecl _imp_CancelSynchronousIo" __imp_CancelSynchronousIo
0x18000C260: "__cdecl _imp_SearchPathW" __imp_SearchPathW
0x18000E8E8: "__cdecl _native_startup_state" __native_startup_state
0x1800097D8: "int __cdecl DataSrcDlg_RadioButton(struct HWND__ * __ptr64,unsigned short,unsigned short)" ?DataSrcDlg_RadioButton@@YAHPEAUHWND__@@GG@Z
0x180002370: "long __cdecl PdhiCopyString(unsigned char * __ptr64 * __ptr64,unsigned short * __ptr64,unsigned long * __ptr64,int)" ?PdhiCopyString@@YAJPEAPEAEPEAGPEAKH@Z
0x18000325C: "int __cdecl PdhiLoadMachineObjects(struct HWND__ * __ptr64,int)" ?PdhiLoadMachineObjects@@YAHPEAUHWND__@@H@Z
0x18000C3B0: "__cdecl _imp_MessageBeep" __imp_MessageBeep
0x18000C738: "WMI:" ??_C@_19ECOEJOOF@?$AAW?$AAM?$AAI?$AA?3?$AA?$AA@
0x1800076E0: "void __cdecl PdhiLayoutDialog2(struct _PDHI_BROWSE_DIALOG_DATA * __ptr64)" ?PdhiLayoutDialog2@@YAXPEAU_PDHI_BROWSE_DIALOG_DATA@@@Z
0x180008B44: "__int64 __cdecl PdhiBrowseCtrDlg_BROWSE_MACHINES(struct _PDHI_BROWSE_DIALOG_DATA * __ptr64,unsigned short,struct HWND__ * __ptr64)" ?PdhiBrowseCtrDlg_BROWSE_MACHINES@@YA_JPEAU_PDHI_BROWSE_DIALOG_DATA@@GPEAUHWND__@@@Z
0x18000C700: "\help\sysmon.hlp" ??_C@_1CC@JGMCEP@?$AA?2?$AAh?$AAe?$AAl?$AAp?$AA?2?$AAs?$AAy?$AAs?$AAm?$AAo?$AAn?$AA?4?$AAh?$AAl?$AAp?$AA?$AA@
0x18000C408: "__cdecl _imp_free" __imp_free
0x18000B090: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x18000E0E0: "struct _PDHI_DETAIL_INFO * PdhiDetailInfo" ?PdhiDetailInfo@@3PAU_PDHI_DETAIL_INFO@@A
0x180001EE8: "unsigned long __cdecl PdhiHashCounter(struct _PDH_COUNTER_PATH_ELEMENTS_W * __ptr64)" ?PdhiHashCounter@@YAKPEAU_PDH_COUNTER_PATH_ELEMENTS_W@@@Z
0x18000C280: "__cdecl _imp_CheckRadioButton" __imp_CheckRadioButton
0x18000B2AD: memset
0x18000D3F4: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x180006B8C: "long __cdecl PdhiCacheCounter(struct _PDHI_BROWSE_DIALOG_DATA * __ptr64,unsigned short * __ptr64,int)" ?PdhiCacheCounter@@YAJPEAU_PDHI_BROWSE_DIALOG_DATA@@PEAGH@Z

[JEB Decompiler by PNF Software]